Privacy Policy
Last updated: 14 May 2026. Plain English where we can. Legal precision where we must.
1. Who we are.
Niddy is a trading name of North Star Brands Ltd (Co. No. 15922689), registered office at Low Ewehurst Farm Cottage, Burnopfield, Newcastle Upon Tyne, NE16 6AR, UK. We're the data controller for personal data collected through this site. Contact: hello@niddy.co.uk.
2. What data we collect.
When you take the AI Readiness Score questionnaire, we collect: the 13 answers you provide about your business; your name; your work email; any optional context you choose to share. When you visit the site, we collect anonymous traffic data only (page views, referrer, country-level location). Optional cookie data only where you've opted in.
3. Why we collect it.
Your questionnaire answers are used solely to generate your AI Readiness Score and the top three opportunities tailored to your business. Your email is used to deliver your results, and (if you opt in at submission) to send occasional Niddy updates. We don't repurpose your answers for anything else.
4. Legal basis.
Consent (questionnaire submission, marketing emails). Legitimate interests (anonymous analytics that don't identify you).
5. How long we keep it.
Questionnaire submissions and email addresses: 24 months from submission, then deleted or anonymised. Anonymous analytics: 14 months.
6. Who we share it with.
Strictly limited to the sub-processors needed to deliver the service. Current list: Tally (form hosting, EU data zone), Make.com (scoring engine, EU data zone), Postmark (results email delivery, EU data zone), Anthropic (AI inference for audit clients only, EU data zone), Xero (invoicing, for paid audit clients only, UK/EU data zone). We never sell your data. We never share it with third-party marketers.
7. International transfers.
Where any sub-processor needs to transfer data outside the UK/EU, we rely on Standard Contractual Clauses and require equivalent protections. Currently no transfers outside UK/EU for free-tier (questionnaire) users.
8. Your rights.
Under UK GDPR you have the right to: access your data; rectify inaccurate data; erase your data; restrict processing; data portability; object to processing; not be subject to automated decision-making with legal effect. To exercise any right, email hello@niddy.co.uk. We respond within 30 days.
9. Cookies.
See our Cookies Policy at /cookies.
10. Complaints.
If you're unhappy with how we've handled your data, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or 0303 123 1113.
11. Changes to this policy.
Material changes are notified by email to anyone who's submitted the questionnaire in the previous 24 months. The current version is always at niddy.co.uk/privacy.